Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: 88ZX3dIe17Bj2zWdixeJPCm28l8zGrgZaKa3aG2BrBA=
Subject key identifier: C5:56:81:C9:50:6D:72:3B:12:F1:B3:0D:E9:F2:8C:FE:95:21:17:FE
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 019A51199FC5F6D75530EC8577871973D442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 09DE
Signing time: Tue 04 Nov 2025 23:00:24 +0000
Manifest this update: Tue 04 Nov 2025 23:00:24 +0000
Manifest next update: Wed 05 Nov 2025 23:00:24 +0000
Files and hashes: 1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=)
2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: IGvB34Z43Upsp7yJg+BVHJwr46Ygh8QGdilwPPF+3aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9f:c5:f6:d7:55:30:ec:85:77:87:19:73:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Nov 4 23:00:24 2025 GMT
Not After : Nov 5 23:00:24 2025 GMT
Subject: CN=c55681c9506d723b12f1b30de9f28cfe952117fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:3d:a3:f5:f3:7f:e2:76:ee:5c:78:84:c7:
03:2c:1b:5e:4b:4f:8e:b4:af:68:85:d7:4a:88:42:
0c:34:36:61:82:f5:f3:62:3c:8c:ad:14:6a:9c:9b:
eb:24:4b:60:39:99:40:f3:8e:b2:c0:e1:fd:f1:f6:
54:ef:47:19:32:8c:68:72:df:b5:d4:80:e0:9b:11:
bc:05:86:95:d5:30:f9:d0:2e:55:78:3b:dd:b3:6e:
40:78:4f:74:9d:4c:4e:30:99:7c:70:51:26:9a:69:
f3:0c:da:62:6d:a7:40:27:20:68:38:f7:5b:ba:2f:
95:af:34:95:24:2d:80:ec:68:92:90:4f:16:56:c8:
ab:f2:2f:16:96:5e:3c:e7:b3:d1:77:b5:57:83:1f:
16:92:7f:80:8e:43:30:0e:6f:87:f2:e0:66:ac:0c:
54:8d:85:4e:92:29:b5:b6:d3:e9:77:23:ad:03:be:
07:cc:ff:23:67:6a:fe:cf:e6:7c:65:7a:3c:00:aa:
aa:e8:7d:43:90:15:22:4c:f7:5a:79:64:78:97:90:
ee:9b:73:63:43:a2:14:a8:70:1a:6d:2e:c6:0b:d4:
61:2e:7f:4c:a1:1d:91:4f:45:03:7a:06:96:8c:7f:
8e:f0:8d:11:6b:66:5e:01:e9:b3:21:87:70:b1:fc:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:81:C9:50:6D:72:3B:12:F1:B3:0D:E9:F2:8C:FE:95:21:17:FE
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9b:7d:3e:9d:8a:c6:c8:dc:38:44:bb:4e:5f:ed:23:8f:aa:
9d:87:78:f4:b1:70:58:36:40:59:b3:6b:73:3f:6a:7f:04:c5:
ca:ac:29:38:c3:02:b2:63:51:01:ff:c8:67:fd:9d:56:9b:60:
ae:88:90:2e:cb:6e:89:b0:c2:e7:92:1a:f7:7f:81:a6:b2:10:
37:98:8f:3d:2e:7b:54:39:e1:b8:ee:ff:32:84:68:23:95:02:
44:da:ee:65:33:05:e1:e2:05:95:52:81:22:d6:d9:48:f8:73:
76:62:c5:ed:b6:72:ba:de:e3:0b:48:69:8a:ae:ab:ae:9c:0c:
87:bd:9d:ec:75:cd:2d:40:3d:04:a4:69:a4:52:1f:6d:50:da:
fd:dc:8b:b0:0a:0c:1b:f5:f3:09:c2:e5:bf:26:15:86:98:9c:
d1:ff:d2:34:e1:7a:20:8c:d8:69:f2:c9:20:44:69:76:19:fd:
85:ac:91:d2:bb:26:65:b3:9b:f0:5b:70:e8:09:a8:b5:34:36:
50:44:e7:c0:8c:7e:77:4a:56:07:2a:1b:d3:6b:e3:1d:70:1e:
dc:7a:f8:0c:03:66:5c:4b:de:93:e7:b7:ba:5f:8b:1d:10:48:
a9:d6:f1:24:85:f1:4b:e6:2e:d1:58:5b:66:7d:fe:90:20:79:
68:7a:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:28:31 2025 by rpki-client